DDOS attack against Win6

Y

Yash

Bass
Dated: May 14, 2004

Our entire network was brought down again for 15 minutes by a major DDOS attack. The network is now back online as the attack strength has been significantly reduced to 25Mbps now.

The attack is once again against Win6
 
Attack has now been reduced to around 15Mbps. We are working to cut it off. You shouldn't see any sort of slowness because we have sufficient bandwidth capacity to deal with this
 
Attack strength is now at 10Mbps

The traffic is coming from 128.134.0.0/16 and we are working to block it
 
128.134.0.0/16 has been blocked from our network. Attack has been destroyed now.

This IP block is owned by Korean Telecom and we will be contacting them regarding this.

We had taken measures after the first DOS attack 48 hours ago (from Manchester University's network) to quickly deal with a attack of this type in the future. I hope we have demonstrated that by being able to quickly resolve this attack in 15 minutes

We are working on ways to improve our anti-DDOS attack capabilities to ensure minimum service outage during another attack
 
Win6's IP has been disabled by level3 again. We are very irritated by this and trying to get it activated ASAP
 
Win6 IP has been reactivated
We are going to be switching over Win6 to a new shared IP. Details will be announced later
 
You must log in or register to reply here.
Back
Top